HWZ Forums

Login Register FAQ Mark Forums Read

Does ISP hijack DNS?

Reply
 
LinkBack Thread Tools
Old 12-07-2018, 04:01 PM   #16
High Supremacy Member
 
amazingone's Avatar
 
Join Date: Jan 2015
Posts: 41,676
Extended test


On Singtel fibre, w/o using any third-party DNS services.
__________________
喜歡自己的樣子
喜歡自己喜歡你的樣子 🤞
amazingone is offline   Reply With Quote
Old 12-07-2018, 05:27 PM   #17
Senior Member
 
Join Date: Jun 2018
Posts: 636
Is there any advantage of not using the ISP DNS server?
squarepipe is offline   Reply With Quote
Old 13-07-2018, 04:29 PM   #18
Senior Member
 
Join Date: Aug 2017
Posts: 1,829
Is there any advantage of not using the ISP DNS server?
Well you can bypass censorship, as for Google DNS and cloudfare both of them supports dnssec and DNS over https. Both should prevent ISP (Singtel) form hijacking your DNS traffic.

Last edited by dryteletubby; 13-07-2018 at 04:38 PM..
dryteletubby is offline   Reply With Quote
Old 13-07-2018, 05:27 PM   #19
High Supremacy Member
 
Join Date: Oct 2004
Posts: 37,423
M1 doesn't hijack DNS. If the dnsleaktest doesn't show your ISP DNS being used when you selected a 3rd party DNS resolver, you are safe.

https://www.dnsleaktest.com/what-is-...dns-proxy.html
don't waste your time explain to this guy......
chengsun is offline   Reply With Quote
Old 13-07-2018, 05:34 PM   #20
High Supremacy Member
 
Join Date: Oct 2004
Posts: 37,423
Well you can bypass censorship, as for Google DNS and cloudfare both of them supports dnssec and DNS over https. Both should prevent ISP (Singtel) form hijacking your DNS traffic.
escape censorship as in ... porn, ect?

I think ISP block them at another level, like firewall. At least the ISP that I worked for last time did it that way. they have 1 equipment just for this purpose. every now and then IDA would send letter/email to the company telling them to block sites, a whole list. after legal team vent through, it was passed to system team process. one of my task was to process that..... well, that censorship only applies to residential customers. commercial customer no such censorship.
chengsun is offline   Reply With Quote
Old 13-07-2018, 07:46 PM   #21
Senior Member
 
Join Date: Aug 2017
Posts: 1,829
escape censorship as in ... porn, ect?

I think ISP block them at another level, like firewall. At least the ISP that I worked for last time did it that way. they have 1 equipment just for this purpose. every now and then IDA would send letter/email to the company telling them to block sites, a whole list. after legal team vent through, it was passed to system team process. one of my task was to process that..... well, that censorship only applies to residential customers. commercial customer no such censorship.
From my experience just changing to a 3rd party DNS server unblocks most blocked sites.

In fact I only realised those sites are blocked until I switch to M1 fiber from Singtel ADSL and forgot to change the DNS server.
dryteletubby is offline   Reply With Quote
Old 13-07-2018, 09:41 PM   #22
Junior Member
 
Join Date: Apr 2012
Posts: 35


My Repubulic & Google DNS
Jhawk55 is offline   Reply With Quote
Old 13-07-2018, 10:48 PM   #23
High Supremacy Member
 
Join Date: Oct 2004
Posts: 37,423
From my experience just changing to a 3rd party DNS server unblocks most blocked sites.

In fact I only realised those sites are blocked until I switch to M1 fiber from Singtel ADSL and forgot to change the DNS server.
probably different ISP different way. when question they only need to show IDA that it is working the default way.

last time, when M1 fiber, broadband (M1 got broadband as well last time) blocked a site, it was still surf-able on M1 mobile..... Now no more.
chengsun is offline   Reply With Quote
Old 13-07-2018, 11:00 PM   #24
Senior Member
 
Join Date: Aug 2017
Posts: 1,829
probably different ISP different way. when question they only need to show IDA that it is working the default way.

last time, when M1 fiber, broadband (M1 got broadband as well last time) blocked a site, it was still surf-able on M1 mobile..... Now no more.
You got change DNS server to Google's or cloudfare?

Also remember to change the ipv6 DNS address. My friend made the mistake of changing only ipv4 address and was wondering why got sites still unaccessible.
dryteletubby is offline   Reply With Quote
Old 13-07-2018, 11:08 PM   #25
Arch-Supremacy Member
 
rubbadubbaducky!'s Avatar
 
Join Date: Nov 2008
Posts: 12,882
My ipv4 is cloudflare. But I thought I disabled ipv6... Still need to change?

You got change DNS server to Google's or cloudfare?

Also remember to change the ipv6 DNS address. My friend made the mistake of changing only ipv4 address and was wondering why got sites still unaccessible.
__________________
YOU BATE. I CAP.
rubbadubbaducky! is offline   Reply With Quote
Old 14-07-2018, 07:43 PM   #26
Senior Member
 
Join Date: Aug 2017
Posts: 1,829
My ipv4 is cloudflare. But I thought I disabled ipv6... Still need to change?



If you can access block sites and dnsleak test shows only cloudfare DNS being used, you are fine
dryteletubby is offline   Reply With Quote
Reply
Important Forum Advisory Note
This forum is moderated by volunteer moderators who will react only to members' feedback on posts. Moderators are not employees or representatives of HWZ. Forum members and moderators are responsible for their own posts.

Please refer to our Terms of Service for more information.


Thread Tools

Posting Rules

Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On